Socket
Socket
Sign inDemoInstall

node-pre-gyp

Package Overview
Dependencies
Maintainers
4
Versions
109
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

Comparing version 0.6.33 to 0.6.34

template-name.diff

4

CHANGELOG.md
# node-pre-gyp changelog
## 0.6.34
- Upgraded deps to latest versions, started using `^` instead of `~` for all deps.
## 0.6.33

@@ -4,0 +8,0 @@

@@ -1234,2 +1234,6 @@ {

},
"4.8.0": {
"node_abi": 46,
"v8": "4.5"
},
"5.0.0": {

@@ -1387,2 +1391,6 @@ "node_abi": 47,

},
"6.10.0": {
"node_abi": 48,
"v8": "5.1"
},
"7.0.0": {

@@ -1415,3 +1423,23 @@ "node_abi": 51,

"v8": "5.4"
},
"7.6.0": {
"node_abi": 51,
"v8": "5.5"
},
"7.7.0": {
"node_abi": 51,
"v8": "5.5"
},
"7.7.1": {
"node_abi": 51,
"v8": "5.5"
},
"7.7.2": {
"node_abi": 51,
"v8": "5.5"
},
"7.7.3": {
"node_abi": 51,
"v8": "5.5"
}
}

24

package.json
{
"name": "node-pre-gyp",
"description": "Node.js native addon binary install tool",
"version" : "0.6.33",
"version" : "0.6.34",
"keywords": [

@@ -23,16 +23,16 @@ "native",

"dependencies": {
"mkdirp": "~0.5.1",
"nopt": "~3.0.6",
"npmlog": "^4.0.1",
"rc": "~1.1.6",
"request": "^2.79.0",
"rimraf": "~2.5.4",
"semver": "~5.3.0",
"tar": "~2.2.1",
"tar-pack": "~3.3.0"
"mkdirp": "^0.5.1",
"nopt": "^4.0.1",
"npmlog": "^4.0.2",
"rc": "^1.1.7",
"request": "^2.81.0",
"rimraf": "^2.6.1",
"semver": "^5.3.0",
"tar": "^2.2.1",
"tar-pack": "^3.4.0"
},
"devDependencies": {
"aws-sdk": "^2.7.7",
"aws-sdk": "^2.28.0",
"mocha": "^3.2.0",
"retire": "^1.2.10",
"retire": "^1.2.12",
"jshint": "^2.9.4"

@@ -39,0 +39,0 @@ },

@@ -109,4 +109,5 @@ # node-pre-gyp

}
"bundledDependencies":["node-pre-gyp"],
"scripts": {
"preinstall": "npm install node-pre-gyp",
"prepublish": "npm ls"
"install": "node-pre-gyp install --fallback-to-build"

@@ -123,2 +124,13 @@ },

Let's break this down:
- Dependencies need to list `node-pre-gyp`
- Your devDependencies should list `aws-sdk` so that you can run `node-pre-gyp publish` locally or a CI system. We recommend using `devDependencies` only since `aws-sdk` is large and not needed for `node-pre-gyp install` since it only uses http to fetch binaries
- You should add `"bundledDependencies":["node-pre-gyp"]`. This ensures that when you publish your module that the correct version of node-pre-gyp will be included in the `node_modules` folder during publishing. Then when uses install your module `node-pre-gyp` will already be present. Without this your module will not be safely installable for downstream applications that have a depedency on node-pre-gyp in the npm tree (without bundling npm deduping might break the install when node-pre-gyp is moved in flight)
- Your `scripts` section should optionally add `"prepublish": "npm ls"` to ensure the right node-pre-gyp version is bundled before publishing your module. If node-pre-gyp is missing or an old version is present then this will catch that error before you publish a broken package.
- Your `scripts` section should override the `install` target with `"install": "node-pre-gyp install --fallback-to-build"`. This allows node-pre-gyp to be used instead of the default npm behavior of always source compiling with `node-gyp` directly.
- Your package.json should contain a `binary` section describing key properties you provide to allow node-pre-gyp to package optimally. They are detailed below.
Note: in the past we recommended using `"preinstall": "npm install node-pre-gyp"` as an alternative method to avoid needing to bundle. But this does not behave predictably across all npm versions - see https://github.com/mapbox/node-pre-gyp/issues/260 for the details. So we do not recommend using `preinstall` to install `node-pre-gyp`. Instead we recommend bundling.
##### The `binary` object has three required properties

@@ -125,0 +137,0 @@

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc